ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] RDP protocol

From: Kaul <mykaul@xxxxxxxxx>
Date: Mon, 29 Oct 2007 11:57:28 +0200
I've added to the Wiki a link to a document detailing very clearly the protocol details - http://efod.se/writings/thesis.pdf .
Specifically, the BER encoded stuff is a public key and some nonce. I think it's inside an X.509 certificate.